Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XD-KJ3ViNd3Ytz3g97ZBgOoGvtg.roa
File: XD-KJ3ViNd3Ytz3g97ZBgOoGvtg.roa (raw, json)
Hash identifier: PS5U8TRAD2oAftkkV/5FvtHS5WPXO3IolT80Yed91yQ=
Subject key identifier: 5C:3F:8A:27:75:62:35:DD:D8:B7:3D:E0:F7:B6:41:80:EA:06:BE:D8
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F8C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XD-KJ3ViNd3Ytz3g97ZBgOoGvtg.roa
Signing time: Fri 01 Sep 2023 08:29:16 +0000
ROA not before: Fri 01 Sep 2023 08:29:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131607
IP address blocks: 150.117.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3980 (0xf8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5C3F8A27756235DDD8B73DE0F7B64180EA06BED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:4b:3b:93:26:e5:1f:40:09:63:23:48:ba:
35:91:50:cf:0f:8b:00:31:70:c4:85:0d:7d:13:c8:
69:7a:f7:34:7d:e3:b1:2e:65:6b:1f:b2:e7:14:31:
92:24:3d:32:51:34:dd:bc:fb:19:98:63:0b:d1:aa:
5a:61:ed:ab:3e:e0:37:bf:94:03:89:7f:80:98:1a:
d5:dd:0c:06:37:ae:88:c9:f2:84:26:10:a7:ab:88:
1e:1b:28:73:9f:f6:6a:90:0e:21:7f:27:2c:f2:a1:
3e:6d:39:7d:db:92:d5:ea:0b:f9:92:bf:ea:7c:7a:
da:80:67:23:cb:c0:68:9b:cf:9f:8b:cb:c8:ab:5f:
b0:43:d0:83:92:58:c8:6d:68:a0:0b:49:45:eb:7f:
bf:3e:59:1a:25:3f:58:f2:85:07:4a:dc:17:bb:0d:
32:6f:5d:f3:e9:14:c4:02:90:aa:37:cd:98:af:02:
ab:2f:e0:ba:a0:ff:ce:13:da:16:66:c7:87:1d:17:
69:e3:68:36:73:3f:f4:be:09:36:01:a7:2b:a3:b7:
b1:ee:b1:9c:2d:c6:65:3b:d9:ea:75:d2:75:2c:c0:
35:5f:d2:ec:3f:dc:dd:30:19:f1:4b:e8:ef:c2:d1:
04:28:c3:59:78:b9:4f:1f:b8:0e:b6:0c:da:54:14:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3F:8A:27:75:62:35:DD:D8:B7:3D:E0:F7:B6:41:80:EA:06:BE:D8
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XD-KJ3ViNd3Ytz3g97ZBgOoGvtg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.176.0/20
Signature Algorithm: sha256WithRSAEncryption
23:49:fd:00:af:8a:9d:5f:ad:2e:ff:7b:e7:98:e6:88:ba:b6:
b7:8b:32:4e:4d:6e:8b:90:19:ca:e7:37:ac:ef:31:a4:83:d6:
a0:16:3e:69:2f:af:18:3c:fd:19:b6:9e:7f:b9:9f:7d:f7:46:
ba:ed:03:21:1c:df:e7:a7:4b:c8:c8:44:02:c7:1b:95:40:37:
27:e0:09:12:69:e2:24:c4:c0:64:56:25:83:94:19:90:00:4c:
6c:0e:e6:73:09:80:7e:b2:a3:73:b0:81:5f:48:08:51:71:f4:
76:6a:c3:62:35:cc:30:b2:fb:64:8a:cc:ff:04:a9:df:f9:65:
12:63:8a:0b:f6:0f:e1:83:0a:0d:18:92:1d:12:09:89:06:57:
d6:61:2e:a9:09:ef:dc:5c:77:39:e0:c6:3e:d6:3d:66:dc:04:
5d:2e:28:60:40:8b:82:06:cd:81:78:41:b1:8f:a4:2b:83:58:
64:cd:d2:e0:3b:30:54:8e:27:ff:4f:44:71:7b:79:3a:ea:7b:
3d:06:93:04:51:3f:6c:eb:90:65:04:4b:33:6b:12:63:dc:df:
b5:cd:b6:95:f1:65:d4:a8:f9:f8:a8:b5:69:40:d8:9a:e0:d7:
41:4d:bb:ce:2e:2d:1c:20:7a:e3:10:db:bf:c5:31:9b:ff:7a:
69:ba:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org